CVE-2021-42056: Improper Link Resolution Before File Access

Thales Safenet Authentication Client SAC for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges...

PT-2022-11537

Name of the Vulnerable Software and Affected Versions Thales Safenet Authentication Client SAC for Linux and Windows versions through 10.7.7 Description The issue allows a local attacker to create insecure temporary hid and lock files, potentially leading to arbitrary file overwriting and command...

Thales Safenet Authentication Client 后置链接漏洞

Thales Group Thales Safenet Authentication Client is an authentication client from Thales Group, Inc. .7 and earlier versions contain an elevation of privilege vulnerability that stems from the creation of temporary files with insecure privileges, which could be exploited by a local attacker to...

CVE-2021-42811

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed...

CVE-2021-42811

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed...

Path traversal

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed...

CVE-2021-42811

CVE-2021-42811 describes a path traversal vulnerability in SafeNet KeySecure. An authenticated user can read arbitrary files on the deployed system due to an improper limitation of a pathname to restricted directories. Affected component is SafeNet KeySecure (path handling/file access). The issue...

CVE-2021-42811 Vulnerability in SafeNet KeySecure

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed...

SafeNet KeySecure Management 路径遍历漏洞

SafeNet KeySecure Management is a secure software package from SafeNet USA. A security vulnerability exists in SafeNet KeySecure Management that stems from an improper restriction of pathnames in restricted directories. An authenticated attacker could read arbitrary files from the underlying syst...

CVE-2021-42811: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed...

PT-2022-11697

Name of the Vulnerable Software and Affected Versions SafeNet KeySecure affected versions not specified Description The issue allows an authenticated user to read arbitrary files from the underlying system due to improper limitation of a pathname to a restricted directory, also known as a 'Path...

CVE-2021-42811

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed...

CVE-2022-28859: Insertion of Sensitive Information into Log File

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts nethsm-safenet-install.sh and nethsm-thales-install.sh expose the Net HSM partition password. Note: Software versions which have reached End of Technical Support EoTS are not...

PT-2022-19265

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 15.1.5.1 F5 BIG-IP versions prior to 14.1.4.6 Description The issue occurs when installing Net HSM on F5 BIG-IP. The scripts nethsm-safenet-install.sh and nethsm-thales-install.sh expose the Net HSM partition...

CVE-2022-21203

Improper permissions in the SafeNet Sentinel driver for IntelR QuartusR Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21203

Improper permissions in the SafeNet Sentinel driver for IntelR QuartusR Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the SafeNet Sentinel driver for IntelR QuartusR Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21203

Intel Quartus Prime Standard Edition before 21.1 and Pro Edition before 21.3 are affected by CVE-2022-21203 due to improper permissions in the SafeNet Sentinel driver, enabling escalation of privilege via local access for an authenticated user. Root cause is a local-permission issue in the driver...

CVE-2022-21203

Improper permissions in the SafeNet Sentinel driver for IntelR QuartusR Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21203

Improper permissions in the SafeNet Sentinel driver for IntelR QuartusR Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access...